← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buff...Show more
In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read.Show less
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while ano...Show more
In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.Show less
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may be consumed.
1Google
1Android
May 13, 2026
Aug 18, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writin...Show more
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.Show less